GHSA-f5w3-73h4-jpcm

ghsaUSosv

mongosh vulnerable to local privilege escalation

view advisory published 2025-02-27Licence: CC-BY-4.0

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-1756UShigh7.8—
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a craft…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan